Topic

Microsoft Active Directory Domain Services account hardening

Applicable to

Non Classified, Official, Protected, Secret, Top Secret

History

Mar 2025

Service accounts configured with an SPN use the Advanced Encryption Standard for encryption.

A new control was added recommending that service accounts configured with an SPN use the Advanced Encryption Standard for encryption.